Canonical Ltd. Apport

• CVE-2020-11936 Low 3.1 gdbus setgid privilege escalation 0.3%
• CVE-2022-28653 High 7.5 Users can consume unlimited disk space in /var/crash 0.4%
• CVE-2022-28658 Medium 5.5 Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing 0.2%
• CVE-2022-28657 High 7.8 Apport does not disable python crash handler before entering chroot 0.2%
• CVE-2022-28656 Medium 5.5 is_closing_session() allows users to consume RAM in the Apport process 0.2%
• CVE-2022-28655 High 7.1 is_closing_session() allows users to create arbitrary tcp dbus connections 0.2%
• CVE-2022-28654 Medium 5.5 is_closing_session() allows users to fill up apport.log 0.3%
• CVE-2022-28652 Medium 5.5 ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack 0.2%
• CVE-2022-1242 High 7.8 Apport can be tricked into connecting to arbitrary sockets as the root user 0.2%
• CVE-2021-3899 High 7.8 There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root. 0.4%
• CVE-2023-1326 High 7.7 local privilege escalation in apport-cli 0.9%